Managing the Default Password Policy

The default password policy applies to all users in the directory instance who
do not have a specialized policy defined. However, the default password policy does
not apply to the Directory Manager. See Which Password Policy Applies for details on policy scope.

The default password policy is the one policy that you can configure using
the dsconf command. You can also view default password policy by reading cn=Password Policy,cn=config.

This section shows the policy attributes for each policy area and the related
dsconf server properties. It also explains how to view and change default password
policy settings.

Note - The properties that correlate to pwdCheckQuality configure the Password Check plug-in. Therefore, the
five properties apply to the entire server instance. The five properties thus also
apply to other password policies where pwdCheckQuality: 2.

To View Default Password Policy Settings

You can view default password policy settings with the dsconf command.